I want to integrate Copyleaks AI writing detection into the chatbot-ui sample app. I want to prototype a game about talking with enemy bots who attack you if you sound too human.

The Copyleaks API key is used only to login for an access token. https://api.copyleaks.com/documentation/v3/account/login All other API endpoints expect this access token.

Ideally this login process would stay entirely serverside. So I'm thinking of an API route , say POST api/analyze that logs in if necessary before the actual analysis request. Something like:

export default function handler(request) {
  // get login session (token + expire date) from **somewhere**
  // if session nonexistent or expired
    // request the endpoint above for the new session
    // store new session **somewhere**
  // request the analysis endpoint, with token in the header
}

Where would that somewhere be? It should be persistent for the life of the token at least (48 hours).